This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lqco45rsCR9IDR-ViCiPtkELbjs.roa
File: lqco45rsCR9IDR-ViCiPtkELbjs.roa (raw, json)
Hash identifier: ZHW8ZzdDtcI96uQyQ5bjXRa4Fb4KOWXC5wsMbtGXEhc=
Subject key identifier: 96:A7:28:E3:9A:EC:09:1F:48:0D:1F:95:88:28:8F:B6:41:0B:6E:3B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019B7C13267A4925EE68E60F1E96D66D1BCB
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lqco45rsCR9IDR-ViCiPtkELbjs.roa
Signing time: Fri 02 Jan 2026 00:19:48 +0000
ROA not before: Fri 02 Jan 2026 00:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51621
IP address blocks: 185.71.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 18:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:26:7a:49:25:ee:68:e6:0f:1e:96:d6:6d:1b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 00:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96a728e39aec091f480d1f9588288fb6410b6e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:62:3a:db:63:44:04:b1:67:e0:ad:91:ae:
95:0f:8e:ff:26:84:77:a8:9f:3b:88:cc:9c:87:c4:
f3:e6:42:b8:67:ed:28:9e:c9:4f:cd:0d:72:4a:1f:
7e:4d:f1:cb:40:bd:34:16:21:72:00:58:08:63:c8:
30:a9:eb:2f:70:b7:1f:88:37:ea:3c:95:7b:02:e6:
d7:bf:02:af:b2:83:32:82:70:20:5f:38:e3:dd:c3:
be:cb:9a:1c:6b:b0:68:cf:d8:c2:7c:82:34:20:20:
35:3e:5d:69:8f:1a:ba:7e:97:33:c5:fa:90:06:4e:
5c:88:01:4a:73:07:23:57:12:e1:56:db:28:7f:d3:
87:09:c5:14:a4:72:02:11:bd:51:85:53:db:9b:7e:
a1:22:c0:f3:5b:d4:94:85:55:eb:c6:43:87:e3:45:
dc:31:7e:6d:32:e4:d1:b2:2e:aa:b8:51:4a:17:b2:
83:89:61:6d:06:da:b8:48:d8:88:a2:a6:f8:54:00:
41:1a:de:d9:28:b4:11:f9:a4:08:24:69:a5:ef:8d:
c7:48:6d:3f:0d:cf:18:19:5f:a9:43:09:0f:be:b3:
b2:01:e4:c5:08:ea:2b:a6:cb:91:ee:48:6e:4d:77:
76:d1:80:e7:d2:39:4f:62:6f:83:50:4e:d8:b1:a6:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:28:E3:9A:EC:09:1F:48:0D:1F:95:88:28:8F:B6:41:0B:6E:3B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lqco45rsCR9IDR-ViCiPtkELbjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:b5:b4:d8:06:b4:eb:58:ba:e1:48:22:ec:13:5a:a4:90:
e4:a6:73:d8:25:7a:ae:c3:b7:9b:3f:8c:6b:80:f0:e8:5f:10:
57:cf:b8:0f:e7:d2:2f:55:c5:00:26:0d:e5:13:2e:62:e1:72:
92:50:43:47:ea:db:b5:ef:33:5b:5e:69:81:30:bb:e4:07:16:
25:57:39:d4:96:db:91:8d:d3:63:b4:ce:d0:a7:9e:a9:f0:dc:
b7:7d:13:ad:ac:c8:38:0e:df:8b:31:fb:80:f6:86:10:46:e6:
1f:88:ed:30:0c:4f:c2:37:5f:c1:0c:b3:1b:fb:53:de:c7:71:
8c:12:7b:f7:eb:93:9a:82:f1:6f:e2:0e:b8:c6:4b:1e:c1:c4:
b3:ed:62:bc:f5:df:b5:3a:75:cd:fa:2e:c1:af:3b:a4:04:48:
de:e5:0e:22:3c:21:38:8e:96:5f:6d:0b:93:86:b6:8e:5b:84:
9d:d1:4e:dd:65:18:1a:06:c8:69:1b:1c:84:bc:4f:4c:2c:55:
c1:0d:42:d1:d0:ca:af:93:61:2d:41:55:b5:ff:13:cc:ff:44:
80:1c:f0:ab:4e:ff:d2:74:d7:f4:88:95:16:75:aa:a0:9b:88:
0a:64:43:ae:6a:ba:9c:f3:8b:b6:15:3d:56:44:0f:d8:6f:14:
21:dd:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:35 2026 by rpki-client